diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 51054bad..110899a5 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - uses: j178/prek-action@v1
 
@@ -27,7 +27,7 @@ jobs:
         shell: bash
     steps:
       - name: Check out
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up the environment
         uses: ./.github/actions/setup-python-env
@@ -46,21 +46,37 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
-      - name: Set up pnpm
-        uses: pnpm/action-setup@v4
+      - name: Set up Node and pnpm
+        uses: pnpm/setup@v2
         with:
           version: 11.21.0
-
-      - name: Set up Node
-        uses: actions/setup-node@v6
-        with:
-          node-version-file: website/.node-version
-          cache: pnpm
+          runtime: node@24.19.0
+          package-json-file: website/package.json
+          cache: true
           cache-dependency-path: website/pnpm-lock.yaml
+          install: false
 
-      - name: Check if documentation can be built
+      - name: Install website dependencies
+        run: pnpm --dir website install --frozen-lockfile
+
+      - name: Validate dependency health
         run: |
-          pnpm --dir website install --frozen-lockfile
-          pnpm --dir website build
+          pnpm --dir website peers check
+          pnpm --dir website audit --audit-level=low
+
+      - name: Type-check the website
+        run: pnpm --dir website check
+
+      - name: Build the website
+        run: pnpm --dir website build
+
+      - name: Verify routes, search, feeds, and metadata
+        run: pnpm --dir website verify:build
+
+      - name: Validate the Cloudflare deployment
+        run: pnpm --dir website verify:deploy
+
+      - name: Smoke-test the Cloudflare preview
+        run: pnpm --dir website test:preview
diff --git a/website/AGENTS.md b/website/AGENTS.md
index ba80481b..88a38ac3 100644
--- a/website/AGENTS.md
+++ b/website/AGENTS.md
@@ -25,10 +25,10 @@ Site URL: `https://bub.build`
 | Styling       | **Tailwind CSS v4** via `@tailwindcss/vite` + `@astrojs/starlight-tailwind` |
 | Component lib | shadcn/ui conventions (base-vega style) |
 | Animations    | `motion` (formerly Framer Motion)      |
-| Code blocks   | `astro-expressive-code`                |
+| Code blocks   | Astro's Shiki renderer                  |
 | Fonts         | Outfit Variable (sans), JetBrains Mono Variable (mono) |
 | Icons         | **@lucide/astro** — see Icon section below |
-| Type checking | TypeScript strict mode                 |
+| Type checking | TypeScript strict mode + `astro check` |
 
 ---
 
@@ -39,19 +39,20 @@ Site URL: `https://bub.build`
 ```bash
 pnpm install          # install deps
 pnpm dev              # dev server
+pnpm check            # Astro + TypeScript diagnostics
 pnpm build            # production build
+pnpm verify:build     # validate routes, search, feeds, SEO, and OG assets
 pnpm preview          # preview production build
+pnpm verify:deploy    # dry-run the assets-only Cloudflare deployment
+pnpm test:preview     # smoke-test the Cloudflare runtime
 ```
 
 ## Image Handling
 
-- Prefer the standard `Image` component from `astro:assets` for local raster assets used by pages and shared UI.
-- Do not replace local logo or illustration components with raw `<img>` just to work around Cloudflare adapter behavior.
-- The repository intentionally splits image handling in `astro.config.mjs`:
-  - `BUB_ASTRO_IMAGE_MODE=dev`: Cloudflare image service, so `make docs` works under Node without `cloudflare:workers` import failures.
-  - `BUB_ASTRO_IMAGE_MODE=build`: compile-time optimization with passthrough runtime, so `make docs-test`, `make docs-preview`, and production serve stable built asset URLs.
-- `Makefile` is the source of truth for that mode selection. `process.argv` command detection only exists as a fallback for direct `pnpm dev` / `pnpm build` usage inside `website/`.
-- If you change adapter image settings, re-verify all three paths: `make docs`, `make docs-test`, and `make docs-preview`.
+- Prefer Astro's `Image` component from `astro:assets` for local raster assets used by pages and shared UI.
+- All routes are prerendered, so Astro optimizes local images at build time with Sharp.
+- Keep the final output static unless a feature genuinely requires request-time state. Adding an SSR route also requires an adapter, a Worker deployment review, and new runtime smoke tests.
+- Re-verify `make docs`, `make docs-test`, and `make docs-preview` after changing image or output settings.
 
 ---
 
@@ -67,7 +68,7 @@ website/
 ├── src/
 │   ├── content.config.ts      # Content collections: docs (Starlight), i18n (Starlight), posts (blog)
 │   ├── components/            # shared Astro components
-│   │   ├── ui/                # primitives (Icon, SectionHeading)
+│   │   ├── ui/                # primitives (Icon, PostCard, ThemeToggle, etc.)
 │   │   ├── NavBar.astro
 │   │   ├── Footer.astro
 │   │   ├── Hero.astro
@@ -75,9 +76,7 @@ website/
 │   │   ├── HookIntro.astro
 │   │   ├── TapeModel.astro
 │   │   ├── Testimonials.astro
-│   │   ├── Contributors.astro
-│   │   ├── PostCard.astro
-│   │   └── ThemeToggle.astro
+│   │   └── Contributors.astro
 │   ├── content/
 │   │   ├── docs/              # [Zone 1] Starlight content collection
 │   │   │   ├── docs/              # EN docs — maps to /docs/… routes
@@ -95,25 +94,25 @@ website/
 │   │   └── posts/             # [Zone 3] Blog posts
 │   │       ├── en/            # English posts
 │   │       └── zh-cn/         # Chinese posts
+│   ├── data/
+│   │   └── landing-page.ts    # Single source of truth for landing-page copy (both locales)
 │   ├── i18n/                  # [Zone 2] Custom page i18n module (NOT for Starlight docs)
 │   │   ├── ui.ts              # Flat-key UI strings: nav, footer, 404, posts, site meta
 │   │   ├── utils.ts           # getLangFromUrl, useTranslations, getNavProps, etc.
-│   │   └── landing-page.ts    # Single source of truth for all landing-page copy (both locales)
 │   ├── layouts/
 │   │   ├── BaseLayout.astro   # Shared HTML shell (head, nav, footer, scripts)
 │   │   ├── LandingLayout.astro
 │   │   ├── PostLayout.astro
 │   │   └── PostListLayout.astro
 │   ├── pages/
-│   │   ├── 404.astro              # 404 page (custom page, uses Zone 2 i18n)
-│   │   └── [...locale]/           # Dynamic locale routing — generates EN (root) + ZH-CN variants
+│   │   └── [...locale]/           # Static locale routing — prerenders EN (root) + ZH-CN variants
+│   │       ├── 404.astro          # Localized Cloudflare 404 sources
 │   │       ├── index.astro        # Landing page (both locales via getStaticPaths)
 │   │       └── posts/
 │   │           ├── index.astro    # Post list (both locales via getStaticPaths)
 │   │           └── [slug].astro   # Single post (both locales via getStaticPaths)
 │   └── styles/
 │       └── global.css         # Tailwind v4 + Starlight bridge + CSS custom properties
-└── DESIGN.md                  # Visual design guide
 ```
 
 ---
@@ -129,7 +128,7 @@ The site has **three distinct i18n zones**. Each zone has its own translation me
 | Zone | Pages | i18n mechanism | String source |
 |------|-------|---------------|---------------|
 | **1 — Starlight docs** | `/docs/…`, `/zh-cn/docs/…` (all under `src/content/docs/`) | Starlight built-in i18n | `src/content/i18n/{locale}.json` + sidebar `translations` in config |
-| **2 — Custom pages** | Landing (`/`, `/zh-cn/`), 404 | Project's own `src/i18n/` module | `src/i18n/ui.ts` + `src/i18n/landing-page.ts` |
+| **2 — Custom pages** | Landing (`/`, `/zh-cn/`), 404 | Project i18n + typed landing data | `src/i18n/ui.ts` + `src/data/landing-page.ts` |
 | **3 — Blog** | `/posts/…`, `/zh-cn/posts/…` | Content collection + project `src/i18n/` | Post markdown in `src/content/posts/{locale}/`, UI strings in `ui.ts` |
 
 ### Zone 1 — Starlight docs i18n
@@ -195,7 +194,7 @@ export function getStaticPaths() {
 // → generates /zh-cn/    (zh-cn)
 ```
 
-**Never duplicate a page file per locale** — use this pattern instead. The 404 page is the only exception (lives at `src/pages/404.astro` root because Astro requires it there).
+**Never duplicate a page file per locale** — use this pattern instead. The shared `[...locale]/404.astro` emits both 404 variants; the Chinese output is relocated to `dist/zh-cn/404.html` after the build so Cloudflare can serve the nearest localized 404.
 
 | File               | Purpose |
 |--------------------|---------|
@@ -215,8 +214,8 @@ Blog posts are a **content collection** (`src/content/posts/{locale}/`) rendered
 |-------|----------|
 | Put Starlight UI overrides in `src/content/i18n/` | Duplicate Starlight keys into `src/i18n/ui.ts` |
 | Put nav/footer/404/post-list strings in `src/i18n/ui.ts` | Put custom page strings in `src/content/i18n/` |
-| Put landing-page structured copy in `src/i18n/landing-page.ts` | Put landing text in `ui.ts` or Starlight i18n |
-| Use `[...locale]` rest-param pages for custom pages | Duplicate page files per locale (e.g., `zh-cn/posts/`) |
+| Put landing-page structured copy in `src/data/landing-page.ts` | Put landing text in `ui.ts` or Starlight i18n |
+| Use `[...locale]` rest-param pages for custom pages | Duplicate page files per locale |
 | Use `translations` on sidebar items in `astro.config.mjs` | Create separate sidebar translation files for 2 locales |
 | Use BCP-47 tags (`zh-CN`) in Starlight config/i18n files | Use URL slugs (`zh-cn`) in Starlight i18n JSON filenames |
 | Use URL slugs (`zh-cn`) in directory paths and page routes | Use BCP-47 tags in directory/route paths |
@@ -369,13 +368,12 @@ Starlight ships with a blue accent (hue 224/234) and blue-tinted grays. The main
 3. Starlight bridge:        @import '@astrojs/starlight-tailwind';
 4. Tailwind layers:         @import 'tailwindcss/theme.css' layer(theme);
                             @import 'tailwindcss/utilities.css' layer(utilities);
-5. Animation utilities:     @import "tw-animate-css";  (unlayered — @utility can't nest)
-6. @theme inline { … }     — fonts, Starlight color scales, site design tokens, radius
-7. :root { … }             — raw light tokens (unlayered)
-8. .dark, [data-theme="dark"] { … } — raw dark tokens (unlayered)
-9. :root { --sl-font/color overrides } — unlayered to beat bridge @layer utilities
-10. .dark, [data-theme="dark"] { --sl-color-* overrides }
-11. @layer base { … }       — Tailwind preflight + site base resets (lowest priority)
+5. @theme inline { … }     — fonts, Starlight color scales, site design tokens, radius
+6. :root { … }             — raw light tokens (unlayered)
+7. .dark, [data-theme="dark"] { … } — raw dark tokens (unlayered)
+8. :root { --sl-font/color overrides } — unlayered to beat bridge @layer utilities
+9. .dark, [data-theme="dark"] { --sl-color-* overrides }
+10. @layer base { … }       — site base resets (lowest priority)
 ```
 
 **Why this order matters:**
@@ -383,19 +381,17 @@ Starlight ships with a blue accent (hue 224/234) and blue-tinted grays. The main
 | Layer | Contains | Priority |
 |---|---|---|
 | `@layer base` | Site resets (`* { border-border }`, body bg/text, etc.) | Lowest |
-| `@layer starlight` | Starlight + expressive-code styles | Overrides `base` |
+| `@layer starlight` | Starlight component styles | Overrides `base` |
 | `@layer theme` | Tailwind theme variables | Overrides `starlight` |
 | `@layer utilities` | Tailwind utilities | Overrides `theme` |
 | Unlayered CSS | Raw tokens, `--sl-font-*` / `--sl-color-*` overrides, `@media` queries | Highest |
 
 **Key rules:**
 
-- **NEVER use `@import "tailwindcss"`** — it brings in the full Preflight reset that conflicts with Starlight and astro-expressive-code. Only import `tailwindcss/theme.css` and `tailwindcss/utilities.css` in their proper layers.
+- **NEVER use `@import "tailwindcss"`** — it brings in the full Preflight reset that conflicts with Starlight content styles. Only import `tailwindcss/theme.css` and `tailwindcss/utilities.css` in their proper layers.
 - **Define Starlight colors via `@theme` scales** — `--color-accent-50` through `--color-accent-950` and `--color-gray-50` through `--color-gray-950`. The bridge reads these and generates `--sl-color-*` in `@layer utilities`.
 - **Override `--sl-*` colors and fonts manually (unlayered)** — the bridge's auto-mapped values don't produce the right contrast for the monochrome theme. Unlayered `:root` / `.dark, [data-theme="dark"]` blocks with explicit `--sl-color-*` values win over the bridge's `@layer utilities` output.
-- **Import `tailwindcss/preflight.css` in `@layer base`** — restores box-sizing, link resets, and other base styles that the split Tailwind import omits. Because `base` is the lowest layer, EC and Starlight styles still override it.
-- **`tw-animate-css` must be imported unlayered** — it contains `@utility` directives that cannot be nested inside `@layer`.
-- **The `@layer base` `*` reset is safe** — because EC styles live in `@layer starlight.components` (higher priority), they always win.
+- **The `@layer base` `*` reset is safe** — Starlight styles live in a higher-priority layer and always win.
 
 **Starlight color scales (in `@theme`):**
 
@@ -414,11 +410,13 @@ Both scales use pure neutral oklch values (0 chroma) to match the site's monochr
 2. To change Starlight's accent color → update `--color-accent-*` values in `@theme inline`.
 3. To change fonts → update `--font-sans` / `--font-mono` in `@theme inline` AND `--sl-font` / `--sl-font-mono` in the unlayered `:root` block.
 4. To add site-specific overrides that should beat Starlight → put them **unlayered** (outside any `@layer`).
-5. To add base resets that Starlight/EC can override → put them in `@layer base`.
+5. To add base resets that Starlight can override → put them in `@layer base`.
 
-**Overriding expressive-code on custom pages (e.g., Hero):**
+**Styling Astro's `<Code />` component on custom pages (e.g., Hero):**
 
-When using `<Code />` from `astro-expressive-code` outside Starlight docs, override EC's CSS custom properties in the component's scoped `<style>` block:
+Import `<Code />` from `astro:components`. The Hero keeps an `expressive-code`
+wrapper class for its existing terminal styles; define those styles in the
+component's scoped `<style>` block:
 
 ```css
 .hero-terminal :global(.expressive-code) {
@@ -465,11 +463,14 @@ Landing and 404 pages go through `BaseLayout`; docs and Blog pages use Starlight
 
 ## Before Committing
 
-1. `pnpm build` — must pass with no errors.
-2. Check for hardcoded nav props — use `getNavProps()` from `i18n/utils.ts`.
-3. Check for duplicated HTML shell — compose on `BaseLayout`.
-4. Ensure all user-visible strings use the correct zone:
+1. `pnpm peers check && pnpm audit --audit-level=low` — must report no peer or security issues.
+2. `pnpm check` — must report zero errors, warnings, and hints.
+3. `pnpm build && pnpm verify:build` — must pass the generated-site invariants.
+4. `pnpm verify:deploy && pnpm test:preview` — must validate the locked Cloudflare runtime with no bindings.
+5. Check for hardcoded nav props — use `getNavProps()` from `i18n/utils.ts`.
+6. Check for duplicated HTML shell — use `BaseLayout` for landing/404 and `<StarlightPage>` for docs/Blog.
+7. Ensure all user-visible strings use the correct zone:
    - **Zone 1** (Starlight docs): UI overrides in `src/content/i18n/`, sidebar translations inline in config.
-   - **Zone 2** (Custom pages): Landing copy → `landing-page.ts`, shared UI strings → `ui.ts`.
+   - **Zone 2** (Custom pages): Landing copy → `src/data/landing-page.ts`, shared UI strings → `ui.ts`.
    - **Zone 3** (Blog): Post content in `src/content/posts/{locale}/`, UI strings in `ui.ts`.
    - Never duplicate text across zones.
diff --git a/website/DEPLOYMENT.md b/website/DEPLOYMENT.md
index 0f69fe39..8bbfa374 100644
--- a/website/DEPLOYMENT.md
+++ b/website/DEPLOYMENT.md
@@ -1,65 +1,58 @@
 # Website Deployment
 
-## Goal
+The Astro 7 site is fully prerendered into `dist/` and deployed as Cloudflare
+static assets. There is no request-time Worker bundle, session binding, or
+runtime GitHub API call.
 
-The new `website/` directory is the docs and marketing site for Bub.
+## Cloudflare Git Integration
 
-Legacy MkDocs source files may still exist in the repository during the
-transition, but production deployment now targets the Astro site on
-Cloudflare Workers.
-
-## Cloudflare Workers
-
-Connect the repository to a Cloudflare Worker using Git integration.
-
-Recommended settings:
+Connect the repository to a Cloudflare Workers project with these settings:
 
 - Project name: `bub`
-- Build command: `pnpm install --frozen-lockfile && pnpm build`
-- Deploy command: `pnpm wrangler deploy`
-- Path: `website`
+- Working directory: `website`
+- Build command: `pnpm install --frozen-lockfile && pnpm check && pnpm build && pnpm verify:build`
+- Deploy command: `pnpm exec wrangler deploy --config wrangler.jsonc`
+- Node version: `24.19.0`
+- pnpm version: `11.21.0`
 - Environment variable: `SITE_URL=https://bub.build`
-- Environment variable: `NODE_VERSION=22.16.0`
-- Build secret: `GITHUB_TOKEN=<GitHub PAT>` (optional, recommended for higher GitHub API limits)
-
-The repo keeps a minimal [wrangler.jsonc](./wrangler.jsonc) and relies on
-Astro/Wrangler's default Cloudflare integration for the generated Worker
-configuration.
-
-GitHub repo stats are snapshotted during `pnpm build` into
-`src/data/github-snapshot.ts`. The Worker does not call the GitHub API at
-runtime, so `GITHUB_TOKEN` only needs to exist as a build secret.
-
-The repo also includes [public/.assetsignore](./public/.assetsignore) for the
-SSR Worker build:
-
-- `_worker.js`
-- `_routes.json`
-
-Production deployment is handled by Cloudflare Workers Git integration instead of
-GitHub Actions.
-
-## Current Repo State
-
-The local developer entrypoints now target the new site:
-
-- `make docs`
-- `make docs-test`
-- `make docs-preview`
-
-The CI docs check also builds `website/` instead of MkDocs.
-
-## GitHub Actions and Cloudflare Responsibilities
-
-The deployment split is intentionally simple:
-
-- `main.yml` only verifies that the website builds
-- `on-release-main.yml` only handles package release tasks
-- Cloudflare Workers deploys the website from the connected repository
-
-Required Cloudflare Workers project configuration:
-
-- Git integration enabled for this repository
-- Build command set to `pnpm install --frozen-lockfile && pnpm build`
-- Deploy command set to `pnpm wrangler deploy`
-- Working directory set to `website`
+- Build secret: `GITHUB_TOKEN=<GitHub PAT>` (optional; raises GitHub API limits)
+
+The prebuild script snapshots repository stars and contributors into generated
+data. Deployment never calls GitHub at request time.
+
+[`wrangler.jsonc`](./wrangler.jsonc) is the deployment source of truth. It:
+
+- serves `dist/` through Cloudflare Static Assets;
+- preserves Astro's trailing-slash routes;
+- serves `404.html` with a real HTTP 404 status;
+- pins the newest compatibility date supported by the locked workerd runtime;
+- disables Worker observability because no Worker code is deployed.
+
+A successful dry-run reports the static asset scan, a tiny generated assets
+router, and `No bindings found`.
+
+## Local Verification
+
+Run the same gates used by CI:
+
+```bash
+pnpm install --frozen-lockfile
+pnpm peers check
+pnpm audit --audit-level=low
+pnpm check
+pnpm build
+pnpm verify:build
+pnpm verify:deploy
+pnpm test:preview
+```
+
+`verify:build` derives expected routes from the content collections and checks
+HTML routes, Pagefind fragments, sitemap URLs, RSS feeds, Blog metadata,
+pagination, edit links, and OG image dimensions. `test:preview` starts the
+locked Wrangler/workerd runtime and checks representative English, Chinese,
+docs, Blog, feed, image, sitemap, and 404 responses.
+
+Production deployment remains owned by Cloudflare Git integration. GitHub
+Actions performs the full read-only validation sequence on every pull request
+and push to `main`; release workflows continue to handle Python package release
+tasks only.
diff --git a/website/package.json b/website/package.json
index a9ded67c..bede1543 100644
--- a/website/package.json
+++ b/website/package.json
@@ -11,10 +11,13 @@
     "predev": "node ./scripts/generate-github-snapshot.mjs",
     "dev": "astro dev",
     "prebuild": "node ./scripts/generate-github-snapshot.mjs",
-    "build": "astro build",
+    "build": "astro build && node ./scripts/finalize-static-assets.mjs",
     "precheck": "node ./scripts/generate-github-snapshot.mjs",
     "check": "astro check",
-    "preview": "wrangler dev"
+    "preview": "wrangler dev --config wrangler.jsonc",
+    "verify:build": "node ./scripts/verify-build.mjs",
+    "verify:deploy": "node ./scripts/verify-deployment.mjs",
+    "test:preview": "node ./scripts/smoke-preview.mjs"
   },
   "dependencies": {
     "@astrojs/rss": "^4.0.19",
@@ -37,6 +40,6 @@
     "@lucide/astro": "^1.31.0",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
-    "wrangler": "^4.121.0"
+    "wrangler": "^4.122.0"
   }
 }
diff --git a/website/pnpm-lock.yaml b/website/pnpm-lock.yaml
index 1a6d768e..f5c89b5c 100644
--- a/website/pnpm-lock.yaml
+++ b/website/pnpm-lock.yaml
@@ -64,8 +64,8 @@ importers:
         specifier: ^6.0.3
         version: 6.0.3
       wrangler:
-        specifier: ^4.121.0
-        version: 4.121.0
+        specifier: ^4.122.0
+        version: 4.122.0
 
 packages:
 
@@ -220,7 +220,6 @@ packages:
   '@babel/parser@7.29.8':
     resolution: {integrity: sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==}
     engines: {node: '>=6.0.0'}
-    hasBin: true
 
   '@babel/types@7.29.8':
     resolution: {integrity: sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==}
@@ -306,32 +305,32 @@ packages:
       workerd:
         optional: true
 
-  '@cloudflare/workerd-darwin-64@1.20260804.1':
-    resolution: {integrity: sha512-191/PPEFicRK2wK69eXzSjnLgHL79k7zR2VUpyIr8rhFgGns1b5bTHgnBuUrgU2LPbEtwbE5eL2hJ0uhLAFEow==}
+  '@cloudflare/workerd-darwin-64@1.20260811.1':
+    resolution: {integrity: sha512-i5jqz+ywtOefr0AJbiAc8qxBLfSim/B0WJG7aW3B+pWnoVfMJdUQvi+BWcFKZJ0MoCci3KadTx6g31VfuEEqpQ==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [darwin]
 
-  '@cloudflare/workerd-darwin-arm64@1.20260804.1':
-    resolution: {integrity: sha512-aI2cAFLsrNkSz3kLSQrgrO9ICTfY7jb2h0jgaWDE9mQLQQDfpXeYrKWt07tTgMmeNP79o9w3NZe3aqtt8mTGHQ==}
+  '@cloudflare/workerd-darwin-arm64@1.20260811.1':
+    resolution: {integrity: sha512-NoOUM/nvaDdm2Onlnz33FikWjtatzulNtvwvy4xs0IrHaTCHwC0c8NwIt6s+AI13FkDs02/vm2I3GTPLCT9+hQ==}
     engines: {node: '>=16'}
     cpu: [arm64]
     os: [darwin]
 
-  '@cloudflare/workerd-linux-64@1.20260804.1':
-    resolution: {integrity: sha512-KBCjxBIlN2jucfQGaTK4EgmPsWzQgYR/zYhPfi3mkWwdoTyG1dgrt2aizKps/SYse85ci/SOxojKk0/K7vstPw==}
+  '@cloudflare/workerd-linux-64@1.20260811.1':
+    resolution: {integrity: sha512-sdYq2jL1AD1supa3fsi5O4zTB28wSjvTHj7Migh6/ts8EROPdvrSwv+rdGHhv8HJNAz/wbIAY3wZsi1Rw4uUIg==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [linux]
 
-  '@cloudflare/workerd-linux-arm64@1.20260804.1':
-    resolution: {integrity: sha512-7lswfarBZ7xkHpTFrNb74ExwOltIalVaASc+GOYfCNtnwFxK/JZSVByfm/hnZEBtrHU7fMY2z7dYT64rwS0pHg==}
+  '@cloudflare/workerd-linux-arm64@1.20260811.1':
+    resolution: {integrity: sha512-RIRv4shbu1kg05sD+DHTpSFCNnb5Dl2SkPDMUykqZa508tkPqe7VVw7gO0Q5msTBGyL0FfFrLuRxwwfA8u5Sow==}
     engines: {node: '>=16'}
     cpu: [arm64]
     os: [linux]
 
-  '@cloudflare/workerd-windows-64@1.20260804.1':
-    resolution: {integrity: sha512-GOgRWYtxISN5rAWfx3K7zubt3xEn0/ZPFrbcLL+GwT4ouCKyNoHqfT1cPNB6Nx7t8BHEjnuTG7gkHO4Wd5ORdg==}
+  '@cloudflare/workerd-windows-64@1.20260811.1':
+    resolution: {integrity: sha512-g6VquwjASlYAibcNW/0E6Zszht4qLkmnXOGwIjjRHl2A0Qz48kVeMcGvyH6eA0G9U3OzZojjYFpP+YeyQmmdjw==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [win32]
@@ -1259,7 +1258,6 @@ packages:
   '@shuding/opentype.js@1.4.0-beta.0':
     resolution: {integrity: sha512-3NgmNyH3l/Hv6EvsWJbsvpcpUba6R8IREQ83nH83cyakCw7uM1arZKNfHwv1Wz6jgqrF/j4x5ELvR6PnK9nTcA==}
     engines: {node: '>= 8.0.0'}
-    hasBin: true
 
   '@sindresorhus/is@7.2.0':
     resolution: {integrity: sha512-P1Cz1dWaFfR4IR+U13mqqiGsLFf1KbayybWwdd2vfctdV6hDpUkgCY0nKOLLTMSoRd/jJNjtbqzf13K8DCCXQw==}
@@ -1574,7 +1572,6 @@ packages:
   acorn@8.18.0:
     resolution: {integrity: sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==}
     engines: {node: '>=0.4.0'}
-    hasBin: true
 
   ajv-draft-04@1.0.0:
     resolution: {integrity: sha512-mv00Te6nmYbRp5DCwclxtt7yV/joXJPGS7nM+97GdxvuttCOfgI3K4U25zboyeX0O+myI8ERluxQe5wljMmVIw==}
@@ -1594,7 +1591,6 @@ packages:
 
   am-i-vibing@0.4.0:
     resolution: {integrity: sha512-MxT4XZL7pzLHpuvhDKdMaQHMGGkJDLluKBLsbstn+8wv9sWcFT6h+0ve9qkml95amVTZtZV83gQe2hY+ojgHLg==}
-    hasBin: true
 
   ansi-regex@6.2.2:
     resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
@@ -1626,7 +1622,6 @@ packages:
 
   astring@1.9.0:
     resolution: {integrity: sha512-LElXdjswlqjWrPpJFg1Fx4wpkOCxj1TDHlSV4PlaRxHGWko024xICaa97ZkMfs6DRKlCguiAI+rbXv5GWwXIkg==}
-    hasBin: true
 
   astro-expressive-code@0.44.1:
     resolution: {integrity: sha512-DT1LnCqbHasBKlvzJ3m6LR4VI94wwx3W9EV/YbP1te4rqjOHsvsezHYuqb5MeLWLftXms/1FA9QBbwCo43DnJQ==}
@@ -1797,7 +1792,6 @@ packages:
   cssesc@3.0.0:
     resolution: {integrity: sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==}
     engines: {node: '>=4'}
-    hasBin: true
 
   csso@5.0.5:
     resolution: {integrity: sha512-0LrrStPOdJj+SPCCrGhzryycLjwcgUSHBtxNA8aIDxf0GLsRh1cKYhB00Gd1lDOS4yGH69+SNn13+TWbVHETFQ==}
@@ -1859,7 +1853,6 @@ packages:
   d3-dsv@3.0.1:
     resolution: {integrity: sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q==}
     engines: {node: '>=12'}
-    hasBin: true
 
   d3-ease@3.0.1:
     resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==}
@@ -2003,7 +1996,6 @@ packages:
 
   direction@2.0.1:
     resolution: {integrity: sha512-9S6m9Sukh1cZNknO1CWAr2QAWsbKLafQiyM5gZ7VgXHeuaoUwffKN4q6NC4A/Mf9iiPlOXQEKW/Mv/mh9/3YFA==}
-    hasBin: true
 
   dom-serializer@2.0.0:
     resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
@@ -2070,7 +2062,6 @@ packages:
   esbuild@0.28.2:
     resolution: {integrity: sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==}
     engines: {node: '>=18'}
-    hasBin: true
 
   escalade@3.2.0:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
@@ -2133,7 +2124,6 @@ packages:
 
   fast-xml-parser@5.10.1:
     resolution: {integrity: sha512-IEMIf7298kXuZSRFoGfMYrl7is8LpavODgbNz1cwIudv7KwVFnuU+UsMporfq6PD6aXSlawZlARiA3UywCTfMw==}
-    hasBin: true
 
   fdir@6.5.0:
     resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
@@ -2314,7 +2304,6 @@ packages:
   is-docker@4.0.0:
     resolution: {integrity: sha512-LHE+wROyG/Y/0ZnbktRCoTix2c1RhgWaZraMZ8o1Q7zCh0VSrICJQO5oqIIISrcSBtrXv0o233w1IYwsWCjTzA==}
     engines: {node: '>=20'}
-    hasBin: true
 
   is-hexadecimal@2.0.1:
     resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}
@@ -2328,11 +2317,9 @@ packages:
 
   jiti@2.7.0:
     resolution: {integrity: sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==}
-    hasBin: true
 
   js-yaml@4.3.1:
     resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
-    hasBin: true
 
   json-schema-traverse@1.0.0:
     resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
@@ -2345,7 +2332,6 @@ packages:
 
   katex@0.16.47:
     resolution: {integrity: sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==}
-    hasBin: true
 
   khroma@2.1.0:
     resolution: {integrity: sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw==}
@@ -2544,7 +2530,6 @@ packages:
   marked@16.4.2:
     resolution: {integrity: sha512-TI3V8YYWvkVf3KJe1dRkpnjs68JUPyEa5vjKrp1XEEJUAOaQc+Qj+L1qWbPd0SJuAdQkFU0h73sXXqwDYxsiDA==}
     engines: {node: '>= 20'}
-    hasBin: true
 
   mdast-util-definitions@6.0.0:
     resolution: {integrity: sha512-scTllyX6pnYNZH/AIp/0ePz6s4cZtARxImwoPJ7kS42n+MnVsI4XbnG6d4ibehRIldYMWM2LD7ImQblVhUejVQ==}
@@ -2717,8 +2702,8 @@ packages:
   micromark@4.0.2:
     resolution: {integrity: sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==}
 
-  miniflare@5.20260804.1-alpha:
-    resolution: {integrity: sha512-J0QBHEj+d75TyFE9VhH+2dXgvdYt/pfyDlm+9IiYUFocQvqYy9iuW1DIqNawh1N7Kr6iMrDzVkgDSdt6pA75uA==}
+  miniflare@5.20260811.0-alpha:
+    resolution: {integrity: sha512-sypXsD5fjY88fZNedPqnwrwR1dwfnfbfW7MfvMyIfPJdtRiCCOpUnjWGeFVYYZ+0fQVICye6Juu+vZgzTEx8XA==}
     engines: {node: '>=22.0.0'}
 
   motion-dom@13.0.0:
@@ -2751,7 +2736,6 @@ packages:
   nanoid@3.3.18:
     resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
-    hasBin: true
 
   neotraverse@1.0.1:
     resolution: {integrity: sha512-WmmLty1YWwJl9yZi77v2dVIV6X2kuYV8YYBI/G3LWGKdGHmHUvL1z7FW0iDvEvGAwNEoc5x1tOOOyDnf5jJw/w==}
@@ -2806,7 +2790,6 @@ packages:
 
   pagefind@1.5.2:
     resolution: {integrity: sha512-XTUaK0hXMCu2jszWE584JGQT7y284TmMV9l/HX3rnG5uo3rHI/uHU56XTyyyPFjeWEBxECbAi0CaFDJOONtG0Q==}
-    hasBin: true
 
   pako@0.2.9:
     resolution: {integrity: sha512-NUcwaKxUxWrZLpDG+z/xZaCgQITkA/Dv4V/T6bw7VON6l1Xz/VnrBqrYjZQ12TamKHzITTfOEIYUj48y2KXImA==}
@@ -2879,7 +2862,6 @@ packages:
   prettier@3.9.6:
     resolution: {integrity: sha512-OpN0zzVdiaiAhxpuuj5efpIS4sY9j7bY6uR5mnj5yPzGkdkjNKSJeUThPb60Jw29QuAZgA4o+/iB49kFiaBX6g==}
     engines: {node: '>=14'}
-    hasBin: true
 
   prismjs@1.30.0:
     resolution: {integrity: sha512-DEvV2ZF2r2/63V+tK8hQvrR2ZGn10srHbXviTlcv7Kpzw8jWiNTqbVgjO3IY8RxrrOUF8VPMQQFysYYYv0YZxw==}
@@ -3004,7 +2986,6 @@ packages:
   rolldown@1.2.3:
     resolution: {integrity: sha512-rn9wpmxplLf7NLNyCk9FyWh3FM43DbY8jOzCdEPzH7uflhTftRbCEpqi6Ly2osgoU8OwObtmavMbWLaWy4LX7A==}
     engines: {node: ^20.19.0 || >=22.12.0}
-    hasBin: true
 
   roughjs@4.6.6:
     resolution: {integrity: sha512-ZUz/69+SYpFN/g/lUlo2FXcIjRkSu3nDarreVdGGndHEBJ6cXPdKguS8JGxwj5HA5xIbVKSmLgr5b3AWxtRfvQ==}
@@ -3029,7 +3010,6 @@ packages:
   semver@7.8.5:
     resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
     engines: {node: '>=10'}
-    hasBin: true
 
   sharp@0.35.2:
     resolution: {integrity: sha512-FVtFjtBCMiJS6yb5CX7Sop45WFMpeGw6oRKuJnXYgf/f1ms/D7LE/ZUSNxnW7rZ/dbslQWYkoqFHGPaDBtaK4w==}
@@ -3111,7 +3091,6 @@ packages:
   svgo@4.0.2:
     resolution: {integrity: sha512-ekx94z1rRc5LDi6oSUaeRnYhd0UOJxdtQCL2rF8xpWxD3TPAsISWOrxezqGovqS38GRZOdpDfvQe3ts6F7nsng==}
     engines: {node: '>=16'}
-    hasBin: true
 
   tailwindcss@4.3.3:
     resolution: {integrity: sha512-gOhV3P7ufE62QDGg1zVaTgCR+EtPv92k2nIhVcVKcLmxT1sUBsQGhnZj175j+MqRt4zLF7ic+sCYjfhxMxj7YQ==}
@@ -3157,7 +3136,6 @@ packages:
   typescript@6.0.3:
     resolution: {integrity: sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==}
     engines: {node: '>=14.17'}
-    hasBin: true
 
   ufo@1.6.4:
     resolution: {integrity: sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA==}
@@ -3291,7 +3269,6 @@ packages:
 
   uuid@14.0.1:
     resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
-    hasBin: true
 
   vfile-location@5.0.3:
     resolution: {integrity: sha512-5yXvWDEgqeiYiBe1lbxYF7UMAIm/IcopxMHrMQDq3nvKcjPKIhZklUKL+AE7J7uApI4kwe2snsK+eI6UTj9EHg==}
@@ -3453,7 +3430,6 @@ packages:
 
   vscode-languageserver@9.0.1:
     resolution: {integrity: sha512-woByF3PDpkHFUreUa7Hos7+pUWdeWMXRd26+ZX2A8cFx6v/JPTtd4/uN0/jB6XQHYaOlHbio03NTHCqrgG5n7g==}
-    hasBin: true
 
   vscode-nls@5.2.0:
     resolution: {integrity: sha512-RAaHx7B14ZU04EU31pT+rKz2/zSl7xMsfIZuo8pd+KZO6PXtQmpevpq3vxvWNcrGbdmhM/rr5Uw5Mz+NBfhVng==}
@@ -3464,17 +3440,17 @@ packages:
   web-namespaces@2.0.1:
     resolution: {integrity: sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==}
 
-  workerd@1.20260804.1:
-    resolution: {integrity: sha512-b0P38g5/ssemwWxd/mafNYggEZ0ere7PCiUH6RCHkgqjRhhXTP45nDiL2L3iIvi8uF2IjNrGpVgMXEunCaeY/w==}
+  workerd@1.20260811.1:
+    resolution: {integrity: sha512-kh+FFm55JQ4ssxhHZV9VPdMQq3D1nHxNJgwxMtWGD4dGppJvLySdguTRDKgeNTvgq6heSz+6TTXyPSDGj8Yllw==}
     engines: {node: '>=16'}
     hasBin: true
 
-  wrangler@4.121.0:
-    resolution: {integrity: sha512-dcARWk6CyaD0vJBSLjJn4K2yo+mYko73hzryq+t/9DXnyAq877RWIMl7uOMcDKs5dDXdoickNhZTKxBYT9XKsA==}
+  wrangler@4.122.0:
+    resolution: {integrity: sha512-qkskzgQ76Y1qvVe5JARgvc3RISq6BC2rPoxQhFoKH1dKIwQc3GDFttQ/7m2OfeQ+tmQRzynv2dy/DXnxFCj2Lw==}
     engines: {node: '>=22.0.0'}
     hasBin: true
     peerDependencies:
-      '@cloudflare/workers-types': ^5.20260804.1
+      '@cloudflare/workers-types': ^5.20260811.1
     peerDependenciesMeta:
       '@cloudflare/workers-types':
         optional: true
@@ -3508,17 +3484,14 @@ packages:
 
   yaml-language-server@1.23.0:
     resolution: {integrity: sha512-3qVyCOexLCWw06PQa5kRPwvMWMZ/eZeCRWUvgD6a0OkqL/4iCnxy2WumbWifa937Uo5xhyWJ0uxlU39ljhNh7A==}
-    hasBin: true
 
   yaml@2.8.3:
     resolution: {integrity: sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==}
     engines: {node: '>= 14.6'}
-    hasBin: true
 
   yaml@2.9.0:
     resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==}
     engines: {node: '>= 14.6'}
-    hasBin: true
 
   yargs-parser@22.0.0:
     resolution: {integrity: sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw==}
@@ -3845,25 +3818,25 @@ snapshots:
 
   '@cloudflare/kv-asset-handler@0.5.0': {}
 
-  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260804.1)':
+  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260811.1)':
     dependencies:
       unenv: 2.0.0-rc.24
     optionalDependencies:
-      workerd: 1.20260804.1
+      workerd: 1.20260811.1
 
-  '@cloudflare/workerd-darwin-64@1.20260804.1':
+  '@cloudflare/workerd-darwin-64@1.20260811.1':
     optional: true
 
-  '@cloudflare/workerd-darwin-arm64@1.20260804.1':
+  '@cloudflare/workerd-darwin-arm64@1.20260811.1':
     optional: true
 
-  '@cloudflare/workerd-linux-64@1.20260804.1':
+  '@cloudflare/workerd-linux-64@1.20260811.1':
     optional: true
 
-  '@cloudflare/workerd-linux-arm64@1.20260804.1':
+  '@cloudflare/workerd-linux-arm64@1.20260811.1':
     optional: true
 
-  '@cloudflare/workerd-windows-64@1.20260804.1':
+  '@cloudflare/workerd-windows-64@1.20260811.1':
     optional: true
 
   '@cspotcode/source-map-support@0.8.1':
@@ -6459,12 +6432,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  miniflare@5.20260804.1-alpha:
+  miniflare@5.20260811.0-alpha:
     dependencies:
       '@cspotcode/source-map-support': 0.8.1
       sharp: 0.35.2
       undici: 7.29.0
-      workerd: 1.20260804.1
+      workerd: 1.20260811.1
       ws: 8.21.0
       youch: 4.1.0-beta.10
     transitivePeerDependencies:
@@ -7297,24 +7270,24 @@ snapshots:
 
   web-namespaces@2.0.1: {}
 
-  workerd@1.20260804.1:
+  workerd@1.20260811.1:
     optionalDependencies:
-      '@cloudflare/workerd-darwin-64': 1.20260804.1
-      '@cloudflare/workerd-darwin-arm64': 1.20260804.1
-      '@cloudflare/workerd-linux-64': 1.20260804.1
-      '@cloudflare/workerd-linux-arm64': 1.20260804.1
-      '@cloudflare/workerd-windows-64': 1.20260804.1
+      '@cloudflare/workerd-darwin-64': 1.20260811.1
+      '@cloudflare/workerd-darwin-arm64': 1.20260811.1
+      '@cloudflare/workerd-linux-64': 1.20260811.1
+      '@cloudflare/workerd-linux-arm64': 1.20260811.1
+      '@cloudflare/workerd-windows-64': 1.20260811.1
 
-  wrangler@4.121.0:
+  wrangler@4.122.0:
     dependencies:
       '@cloudflare/kv-asset-handler': 0.5.0
-      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260804.1)
+      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260811.1)
       blake3-wasm: 2.1.5
       esbuild: 0.28.1
-      miniflare: 5.20260804.1-alpha
+      miniflare: 5.20260811.0-alpha
       path-to-regexp: 6.3.0
       unenv: 2.0.0-rc.24
-      workerd: 1.20260804.1
+      workerd: 1.20260811.1
     optionalDependencies:
       fsevents: 2.3.3
     transitivePeerDependencies:
diff --git a/website/pnpm-workspace.yaml b/website/pnpm-workspace.yaml
index affcb818..b78577bc 100644
--- a/website/pnpm-workspace.yaml
+++ b/website/pnpm-workspace.yaml
@@ -1,6 +1,6 @@
 allowBuilds:
   esbuild@0.28.1 || 0.28.2: true
-  workerd@1.20260804.1: true
+  workerd@1.20260811.1: true
 blockExoticSubdeps: true
 minimumReleaseAge: 60
 minimumReleaseAgeStrict: true
diff --git a/website/scripts/finalize-static-assets.mjs b/website/scripts/finalize-static-assets.mjs
new file mode 100644
index 00000000..7b2dec70
--- /dev/null
+++ b/website/scripts/finalize-static-assets.mjs
@@ -0,0 +1,11 @@
+import { rename, rm } from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const websiteDir = fileURLToPath(new URL('..', import.meta.url));
+const localized404Dir = path.join(websiteDir, 'dist/zh-cn/404');
+const source = path.join(localized404Dir, 'index.html');
+const target = path.join(websiteDir, 'dist/zh-cn/404.html');
+
+await rename(source, target);
+await rm(localized404Dir, { recursive: true });
diff --git a/website/scripts/smoke-preview.mjs b/website/scripts/smoke-preview.mjs
new file mode 100644
index 00000000..eca21389
--- /dev/null
+++ b/website/scripts/smoke-preview.mjs
@@ -0,0 +1,122 @@
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+
+const websiteDir = fileURLToPath(new URL('..', import.meta.url));
+const port = Number.parseInt(process.env.BUB_PREVIEW_PORT ?? '8792', 10);
+const origin = `http://127.0.0.1:${port}`;
+const wrangler = path.join(
+  websiteDir,
+  'node_modules',
+  '.bin',
+  process.platform === 'win32' ? 'wrangler.cmd' : 'wrangler',
+);
+const output = [];
+
+const server = spawn(
+  wrangler,
+  ['dev', '--config', 'wrangler.jsonc', '--ip', '127.0.0.1', '--port', String(port)],
+  {
+    cwd: websiteDir,
+    env: { ...process.env, NO_COLOR: '1' },
+    stdio: ['ignore', 'pipe', 'pipe'],
+  },
+);
+
+for (const stream of [server.stdout, server.stderr]) {
+  stream.setEncoding('utf8');
+  stream.on('data', (chunk) => {
+    output.push(chunk);
+    if (output.length > 200) output.shift();
+  });
+}
+
+async function stopServer() {
+  if (server.exitCode !== null || server.signalCode !== null) return;
+  server.kill('SIGTERM');
+  await Promise.race([
+    new Promise((resolve) => server.once('exit', resolve)),
+    new Promise((resolve) => setTimeout(resolve, 5_000)),
+  ]);
+  if (server.exitCode === null && server.signalCode === null) server.kill('SIGKILL');
+}
+
+async function waitUntilReady() {
+  const deadline = Date.now() + 30_000;
+  while (Date.now() < deadline) {
+    if (server.exitCode !== null) {
+      throw new Error(`Wrangler exited with code ${server.exitCode}.\n${output.join('')}`);
+    }
+    try {
+      const response = await fetch(origin);
+      if (response.ok) return;
+    } catch {
+      // The socket is expected to reject connections until workerd is ready.
+    }
+    await new Promise((resolve) => setTimeout(resolve, 150));
+  }
+  throw new Error(`Wrangler did not become ready within 30 seconds.\n${output.join('')}`);
+}
+
+const routes = [
+  { path: '/', status: 200, type: 'text/html', contains: '<html lang="en"' },
+  { path: '/zh-cn/', status: 200, type: 'text/html', contains: '<html lang="zh-CN"' },
+  { path: '/docs/getting-started/', status: 200, type: 'text/html', contains: 'data-pagefind-body' },
+  {
+    path: '/zh-cn/docs/getting-started/',
+    status: 200,
+    type: 'text/html',
+    contains: '<html lang="zh-CN"',
+  },
+  { path: '/posts/', status: 200, type: 'text/html', contains: 'application/rss+xml' },
+  { path: '/zh-cn/posts/', status: 200, type: 'text/html', contains: '<html lang="zh-CN"' },
+  {
+    path: '/posts/socialized-evaluation/',
+    status: 200,
+    type: 'text/html',
+    contains: '"@type":"BlogPosting"',
+  },
+  {
+    path: '/zh-cn/posts/socialized-evaluation/',
+    status: 200,
+    type: 'text/html',
+    contains: '"inLanguage":"zh-CN"',
+  },
+  { path: '/rss.xml', status: 200, type: 'application/xml', contains: '<rss version="2.0">' },
+  {
+    path: '/zh-cn/rss.xml',
+    status: 200,
+    type: 'application/xml',
+    contains: '<language>zh-CN</language>',
+  },
+  { path: '/og/index.png', status: 200, type: 'image/png' },
+  { path: '/og/zh-cn/index.png', status: 200, type: 'image/png' },
+  { path: '/sitemap-index.xml', status: 200, type: 'application/xml', contains: '<sitemapindex' },
+  { path: '/missing', status: 404, type: 'text/html', contains: 'Page not found' },
+  {
+    path: '/zh-cn/missing',
+    status: 404,
+    type: 'text/html',
+    contains: '<html lang="zh-CN"',
+  },
+];
+
+try {
+  await waitUntilReady();
+  for (const route of routes) {
+    const response = await fetch(`${origin}${route.path}`, { redirect: 'manual' });
+    assert.equal(response.status, route.status, `${route.path} status`);
+    assert.match(response.headers.get('content-type') ?? '', new RegExp(route.type), `${route.path} content type`);
+    if (route.contains) {
+      assert.ok((await response.text()).includes(route.contains), `${route.path} response content`);
+    }
+  }
+  console.log(`Verified ${routes.length} routes through Wrangler's local Cloudflare runtime.`);
+} catch (error) {
+  console.error(output.join(''));
+  throw error;
+} finally {
+  await stopServer();
+}
diff --git a/website/scripts/verify-build.mjs b/website/scripts/verify-build.mjs
new file mode 100644
index 00000000..42186a03
--- /dev/null
+++ b/website/scripts/verify-build.mjs
@@ -0,0 +1,272 @@
+import assert from 'node:assert/strict';
+import { existsSync } from 'node:fs';
+import { readdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { gunzipSync } from 'node:zlib';
+import sharp from 'sharp';
+
+const websiteDir = fileURLToPath(new URL('..', import.meta.url));
+const distDir = path.join(websiteDir, 'dist');
+const docsDir = path.join(websiteDir, 'src/content/docs');
+const postsDir = path.join(websiteDir, 'src/content/posts');
+const siteOrigin = 'https://bub.build';
+
+async function walk(directory, extensions) {
+  const entries = await readdir(directory, { withFileTypes: true });
+  const files = await Promise.all(
+    entries.map(async (entry) => {
+      const entryPath = path.join(directory, entry.name);
+      if (entry.isDirectory()) return walk(entryPath, extensions);
+      return extensions.has(path.extname(entry.name)) ? [entryPath] : [];
+    }),
+  );
+  return files.flat();
+}
+
+function routeFileFromContent(file, contentDir) {
+  const entryId = path.relative(contentDir, file).replaceAll(path.sep, '/').replace(/\.(md|mdx)$/, '');
+  return entryId.endsWith('/index') ? `${entryId}.html` : `${entryId}/index.html`;
+}
+
+function routeFileFromPost(file) {
+  const [locale, filename] = path.relative(postsDir, file).split(path.sep);
+  const prefix = locale === 'en' ? '' : `${locale}/`;
+  const slug = filename.replace(/\.(md|mdx)$/, '');
+  return `${prefix}posts/${slug}/index.html`;
+}
+
+function routeUrlFromHtml(file) {
+  const pathname = file === 'index.html' ? '/' : `/${file.replace(/index\.html$/, '')}`;
+  return new URL(pathname, siteOrigin).href;
+}
+
+function occurrences(value, pattern) {
+  return value.match(pattern)?.length ?? 0;
+}
+
+function unescapeXml(value) {
+  return value
+    .replaceAll('&amp;', '&')
+    .replaceAll('&lt;', '<')
+    .replaceAll('&gt;', '>')
+    .replaceAll('&quot;', '"')
+    .replaceAll('&apos;', "'");
+}
+
+function tagValues(xml, tag) {
+  return [...xml.matchAll(new RegExp(`<${tag}>(?:<!\\[CDATA\\[)?([\\s\\S]*?)(?:\\]\\]>)?</${tag}>`, 'g'))]
+    .map((match) => unescapeXml(match[1].trim()));
+}
+
+async function readDist(relativePath) {
+  return readFile(path.join(distDir, relativePath), 'utf8');
+}
+
+function assertContains(value, needle, message) {
+  assert.ok(value.includes(needle), message);
+}
+
+assert.ok(existsSync(distDir), 'dist/ is missing; run pnpm build first.');
+
+const [docSources, postSources, builtHtml, pagefindFragments] = await Promise.all([
+  walk(docsDir, new Set(['.md', '.mdx'])),
+  walk(postsDir, new Set(['.md', '.mdx'])),
+  walk(distDir, new Set(['.html'])),
+  walk(path.join(distDir, 'pagefind/fragment'), new Set(['.pf_fragment'])),
+]);
+
+const expectedHtml = new Set([
+  '404.html',
+  'index.html',
+  'zh-cn/index.html',
+  'zh-cn/404.html',
+  'posts/index.html',
+  'zh-cn/posts/index.html',
+  ...docSources.map((file) => routeFileFromContent(file, docsDir)),
+  ...postSources.map(routeFileFromPost),
+]);
+const actualHtml = new Set(
+  builtHtml.map((file) => path.relative(distDir, file).replaceAll(path.sep, '/')),
+);
+
+assert.deepEqual(actualHtml, expectedHtml, 'The built HTML route set does not match the content sources.');
+assert.equal(
+  pagefindFragments.length,
+  docSources.length + postSources.length,
+  'Pagefind must index every docs page and Blog article, but not list or landing pages.',
+);
+
+const indexedUrls = new Set(
+  await Promise.all(pagefindFragments.map(async (fragment) => {
+    const compressed = await readFile(fragment);
+    const decoded = gunzipSync(compressed).toString('utf8');
+    assert.ok(decoded.startsWith('pagefind_dcd'), `${fragment} has an unexpected Pagefind payload.`);
+    return JSON.parse(decoded.slice('pagefind_dcd'.length)).url;
+  })),
+);
+const expectedIndexedUrls = new Set([
+  ...docSources
+    .map((file) => routeUrlFromHtml(routeFileFromContent(file, docsDir)))
+    .map((url) => new URL(url).pathname),
+  ...postSources
+    .map((file) => routeUrlFromHtml(routeFileFromPost(file)))
+    .map((url) => new URL(url).pathname),
+]);
+assert.deepEqual(
+  indexedUrls,
+  expectedIndexedUrls,
+  'Pagefind must contain each docs and Blog article URL exactly once.',
+);
+
+const postsByLocale = Map.groupBy(postSources, (file) =>
+  path.relative(postsDir, file).split(path.sep)[0],
+);
+
+for (const [locale, files] of postsByLocale) {
+  assert.ok(locale === 'en' || locale === 'zh-cn', `Unexpected post locale directory: ${locale}`);
+  const prefix = locale === 'en' ? '' : '/zh-cn';
+  const rssPath = locale === 'en' ? 'rss.xml' : 'zh-cn/rss.xml';
+  const rssHref = `${prefix}/rss.xml`;
+  const listPath = locale === 'en' ? 'posts/index.html' : 'zh-cn/posts/index.html';
+  const listHtml = await readDist(listPath);
+
+  assert.equal(occurrences(listHtml, /type="application\/rss\+xml"/g), 1, `${listPath} RSS discovery`);
+  assertContains(listHtml, `href="${rssHref}"`, `${listPath} must expose a visible RSS link.`);
+  assert.equal(occurrences(listHtml, /data-pagefind-body/g), 0, `${listPath} must not duplicate articles in search.`);
+  assert.ok(
+    listHtml.lastIndexOf('class="starlight-site-footer') > listHtml.lastIndexOf('</main>'),
+    `${listPath} site footer must be a top-level landmark outside main.`,
+  );
+  assertContains(
+    listHtml,
+    `property="og:locale" content="${locale === 'en' ? 'en_US' : 'zh_CN'}"`,
+    `${listPath} Open Graph locale`,
+  );
+  assertContains(
+    listHtml,
+    `property="og:image" content="${siteOrigin}${locale === 'en' ? '/og/index.png' : '/og/zh-cn/index.png'}"`,
+    `${listPath} localized Open Graph image`,
+  );
+
+  const postRoutes = [];
+  for (const file of files) {
+    const source = await readFile(file, 'utf8');
+    const published = source.match(/^date:\s*(.+)$/m)?.[1]?.trim();
+    assert.ok(published, `${file} must declare a date.`);
+    const slug = path.basename(file).replace(/\.(md|mdx)$/, '');
+    postRoutes.push({
+      file,
+      slug,
+      published: new Date(published),
+      href: `${prefix}/posts/${slug}/`,
+    });
+  }
+  postRoutes.sort((left, right) => left.published.getTime() - right.published.getTime());
+
+  for (const [index, route] of postRoutes.entries()) {
+    const file = route.file;
+    const sourceId = path.relative(postsDir, file).replaceAll(path.sep, '/');
+    const slug = route.slug;
+    const routePath = `${prefix.slice(1)}${prefix ? '/' : ''}posts/${slug}/index.html`;
+    const html = await readDist(routePath);
+    const canonical = `${siteOrigin}${prefix}/posts/${slug}/`;
+    const jsonLdMatch = html.match(/<script type="application\/ld\+json">([^<]+)<\/script>/);
+
+    assert.equal(occurrences(html, /rel="canonical"/g), 1, `${routePath} canonical count`);
+    assertContains(html, `href="${canonical}"`, `${routePath} canonical URL`);
+    assert.equal(occurrences(html, /type="application\/rss\+xml"/g), 1, `${routePath} RSS discovery`);
+    assertContains(html, `href="${siteOrigin}${rssHref}"`, `${routePath} RSS URL`);
+    assertContains(html, 'property="og:type" content="article"', `${routePath} Open Graph type`);
+    assertContains(
+      html,
+      `property="og:locale" content="${locale === 'en' ? 'en_US' : 'zh_CN'}"`,
+      `${routePath} Open Graph locale`,
+    );
+    assertContains(html, 'property="article:published_time"', `${routePath} publish date metadata`);
+    assertContains(html, 'data-pagefind-body', `${routePath} Pagefind body`);
+    assert.ok(
+      html.lastIndexOf('class="starlight-site-footer') > html.lastIndexOf('</main>'),
+      `${routePath} site footer must be a top-level landmark outside main.`,
+    );
+    assertContains(
+      html,
+      `github.com/bubbuild/bub/edit/main/website/src/content/posts/${sourceId}`,
+      `${routePath} edit link`,
+    );
+    assert.ok(jsonLdMatch, `${routePath} must contain BlogPosting JSON-LD.`);
+
+    const jsonLd = JSON.parse(jsonLdMatch[1]);
+    assert.equal(jsonLd['@type'], 'BlogPosting', `${routePath} JSON-LD type`);
+    assert.equal(jsonLd.url, canonical, `${routePath} JSON-LD canonical URL`);
+    assert.equal(jsonLd.inLanguage, locale === 'en' ? 'en' : 'zh-CN', `${routePath} JSON-LD language`);
+    assert.deepEqual(
+      jsonLd.image,
+      [`${siteOrigin}/og/posts/${locale}/${slug}.png`],
+      `${routePath} JSON-LD image`,
+    );
+
+    const expectedPagination = [postRoutes[index - 1]?.href, postRoutes[index + 1]?.href].filter(Boolean);
+    const actualPagination = [...html.matchAll(/<a[^>]+href="([^"]+)"[^>]+rel="(?:prev|next)"/g)]
+      .map((match) => match[1]);
+    assert.deepEqual(actualPagination.toSorted(), expectedPagination.toSorted(), `${routePath} pagination URLs`);
+  }
+
+  const feed = await readDist(rssPath);
+  assert.equal(occurrences(feed, /<item>/g), files.length, `${rssPath} item count`);
+  assertContains(feed, `<language>${locale === 'en' ? 'en' : 'zh-CN'}</language>`, `${rssPath} language`);
+  assertContains(feed, `<link>${siteOrigin}${prefix}/posts/</link>`, `${rssPath} channel URL`);
+  assert.deepEqual(
+    tagValues(feed, 'item').map((item) => tagValues(item, 'link')[0]),
+    postRoutes.toReversed().map((post) => `${siteOrigin}${post.href}`),
+    `${rssPath} item URL and publication order`,
+  );
+}
+
+for (const [relativePath, canonical, language] of [
+  ['index.html', `${siteOrigin}/`, 'en'],
+  ['zh-cn/index.html', `${siteOrigin}/zh-cn/`, 'zh-CN'],
+]) {
+  const html = await readDist(relativePath);
+  assert.equal(occurrences(html, /rel="canonical"/g), 1, `${relativePath} canonical count`);
+  assertContains(html, `href="${canonical}"`, `${relativePath} canonical URL`);
+  assertContains(html, `hreflang="${language}"`, `${relativePath} self language alternate`);
+  assertContains(html, 'hreflang="x-default"', `${relativePath} x-default alternate`);
+  const rssHref = language === 'en' ? `${siteOrigin}/rss.xml` : `${siteOrigin}/zh-cn/rss.xml`;
+  assertContains(html, `type="application/rss+xml"`, `${relativePath} RSS discovery`);
+  assertContains(html, `href="${rssHref}"`, `${relativePath} localized RSS URL`);
+}
+
+const sitemap = await readDist('sitemap-0.xml');
+const sitemapUrls = new Set([...sitemap.matchAll(/<loc>([^<]+)<\/loc>/g)].map((match) => match[1]));
+const expectedSitemapUrls = new Set(
+  [...expectedHtml].filter((file) => !file.endsWith('404.html')).map(routeUrlFromHtml),
+);
+assert.deepEqual(sitemapUrls, expectedSitemapUrls, 'The sitemap must contain every public HTML route except 404.');
+
+const expectedOgImages = [
+  'og/index.png',
+  'og/zh-cn/index.png',
+  ...postSources.map((file) => {
+    const id = path.relative(postsDir, file).replaceAll(path.sep, '/').replace(/\.(md|mdx)$/, '');
+    return `og/posts/${id}.png`;
+  }),
+];
+for (const imagePath of expectedOgImages) {
+  const metadata = await sharp(path.join(distDir, imagePath)).metadata();
+  assert.equal(metadata.width, 1200, `${imagePath} width`);
+  assert.equal(metadata.height, 630, `${imagePath} height`);
+  assert.equal(metadata.format, 'png', `${imagePath} format`);
+}
+
+assert.equal(
+  existsSync(path.join(distDir, 'server')),
+  false,
+  'A fully prerendered site must not emit a server bundle.',
+);
+assert.equal(existsSync(path.join(distDir, '_worker.js')), false, 'Static deployment must not emit a Worker script.');
+
+console.log(
+  `Verified ${actualHtml.size} HTML routes, ${pagefindFragments.length} search fragments, ` +
+    `${sitemapUrls.size} sitemap URLs, ${postSources.length} Blog articles, and ${expectedOgImages.length} OG images.`,
+);
diff --git a/website/scripts/verify-deployment.mjs b/website/scripts/verify-deployment.mjs
new file mode 100644
index 00000000..de93500b
--- /dev/null
+++ b/website/scripts/verify-deployment.mjs
@@ -0,0 +1,26 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+
+const websiteDir = fileURLToPath(new URL('..', import.meta.url));
+const wrangler = path.join(
+  websiteDir,
+  'node_modules',
+  '.bin',
+  process.platform === 'win32' ? 'wrangler.cmd' : 'wrangler',
+);
+const result = spawnSync(
+  wrangler,
+  ['deploy', '--config', 'wrangler.jsonc', '--dry-run'],
+  { cwd: websiteDir, encoding: 'utf8', env: { ...process.env, NO_COLOR: '1' } },
+);
+const output = `${result.stdout ?? ''}${result.stderr ?? ''}`;
+
+process.stdout.write(output);
+assert.equal(result.error, undefined, 'Wrangler could not be started.');
+assert.equal(result.status, 0, `Wrangler dry-run failed with status ${result.status}.`);
+assert.match(output, /No bindings found\./, 'Cloudflare deployment must not declare runtime bindings.');
+
+console.log('Verified an assets-only Cloudflare deployment with no runtime bindings.');
diff --git a/website/src/pages/404.astro b/website/src/pages/[...locale]/404.astro
similarity index 66%
rename from website/src/pages/404.astro
rename to website/src/pages/[...locale]/404.astro
index 6e1a504b..479e0f09 100644
--- a/website/src/pages/404.astro
+++ b/website/src/pages/[...locale]/404.astro
@@ -2,25 +2,31 @@
 import Icon from '@/components/ui/Icon.astro';
 import LinkButton from '@/components/ui/LinkButton.astro';
 import BaseLayout from '@/layouts/BaseLayout.astro';
-import { getDocsHref, getLangFromUrl, useTranslations, useTranslatedPath } from '@/i18n/utils';
+import { getDocsHref, getLocalizedPath, getStaticLocalePaths, useTranslations } from '@/i18n/utils';
+import type { Locale } from '@/i18n/ui';
 
-const locale = getLangFromUrl(Astro.url);
+export const getStaticPaths = getStaticLocalePaths;
+
+interface Props {
+  locale: Locale;
+}
+
+const { locale }: Props = Astro.props;
 const t = useTranslations(locale);
-const tp = useTranslatedPath(locale);
 ---
 
-<BaseLayout title={`404 | Bub`} description={t('404.description')} robots="noindex" backToTop={false}>
+<BaseLayout title="404 | Bub" description={t('404.description')} robots="noindex" backToTop={false}>
   <main id="main-content" class="flex min-h-[calc(100vh-8rem)] items-center px-5 py-20 md:px-8">
     <div class="mx-auto w-full max-w-6xl">
       <p class="font-mono text-sm text-muted-foreground">404</p>
       <h1 class="mt-4 text-4xl font-bold tracking-tight text-foreground md:text-5xl">
         {t('404.title')}
       </h1>
-      <p class="mt-4 text-base text-muted-foreground max-w-sm">
+      <p class="mt-4 max-w-sm text-base text-muted-foreground">
         {t('404.description')}
       </p>
       <div class="mt-8 flex flex-col gap-3 sm:flex-row">
-        <LinkButton href={tp('/')} class="w-full px-6 py-3 sm:w-auto">
+        <LinkButton href={getLocalizedPath('/', locale)} class="w-full px-6 py-3 sm:w-auto">
           <Icon name="arrowLeft" size={15} aria-hidden="true" />
           {t('404.home')}
         </LinkButton>
diff --git a/website/wrangler.jsonc b/website/wrangler.jsonc
index f43bb62c..09c1de13 100644
--- a/website/wrangler.jsonc
+++ b/website/wrangler.jsonc
@@ -1,7 +1,7 @@
 {
   "$schema": "./node_modules/wrangler/config-schema.json",
   "name": "bub",
-  "compatibility_date": "2026-08-11",
+  "compatibility_date": "2026-08-12",
   "assets": {
     "directory": "./dist",
     "html_handling": "auto-trailing-slash",